CVE-2025-2295 Potential iSCSI R2T PDU Vulnerability

🗓️ 14 Mar 2025 21:35:10Reported by TianoCoreType

Potential iSCSI R2T PDU vulnerability in BIOS may lead to denial of service from Integer Overflow.

Reporter	Title	Published	Views	Family All 55
Tenable Nessus	Amazon Linux 2 : edk2 (ALAS-2025-2824)	17 Apr 202500:00	–	nessus
Tenable Nessus	Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : EDK II vulnerabilities (USN-7894-1)	3 Dec 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-2295	30 Aug 202500:00	–	nessus
Amazon	Low: edk2	16 Apr 202500:00	–	amazon
Amazon	Low: edk2	16 Apr 202500:00	–	amazon
AstraLinux	Astra Linux - уязвимость в edk2	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the SSLfree_buffers() function in the OpenSSL cryptographic library allows a hacker to execute arbitrary code or cause a service failure.	10 Jul 202400:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the functions EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(), and BN_GF2m_*() in the Elliptic Curve API of the OpenSSL cryptographic library, which allows a hacker to execute arbitrary code.	30 Oct 202400:00	–	bdu_fstec
CBLMariner	CVE-2025-2295 affecting package edk2 for versions less than 20240524git3e722403cd16-14	9 Feb 202623:35	–	cbl_mariner
CBLMariner	CVE-2025-2295 affecting package edk2 for versions less than 20230301gitf80f052277c8-45	5 Feb 202622:09	–	cbl_mariner

[
  {
    "defaultStatus": "unaffected",
    "packageName": "NetworkPkg",
    "product": "EDK2",
    "vendor": "TianoCore",
    "versions": [
      {
        "lessThanOrEqual": "edk2-stable202502",
        "status": "affected",
        "version": "0",
        "versionType": "Custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/tianocore/edk2/security/advisories/GHSA-8522-69fh-w74x

14 Mar 2025 21:35Current

CVSS 3.13.5

EPSS0.00041

CWE-190